last executing test programs: 5.233656449s ago: executing program 1 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 5.198083515s ago: executing program 1 (id=67): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a00000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd290747"], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'bridge0\x00'}) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0xfdef) 4.274004715s ago: executing program 1 (id=73): r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2044, 0x0) 4.273164983s ago: executing program 1 (id=76): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) 4.23657106s ago: executing program 1 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 3.648383433s ago: executing program 1 (id=88): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xec}}, 0x4000844) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800100, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x109301) 3.521947158s ago: executing program 2 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="440100001000010025bd700000010000000000000000000000000000ffffac1414bb000103944e2300800a0000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c000000fe80000000000000000000000000002e000000000000000000080000000000000600000000000000ffff0000000000001c25080000000000a60d00000000000058000000000000000000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000000abd7000033500000a00020e2000000000000000480003006465666c617465000000000000"], 0x144}, 0x1, 0x0, 0x0, 0x8851}, 0x0) 3.521705595s ago: executing program 2 (id=92): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2}) 3.508223082s ago: executing program 2 (id=93): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x4b726000) r0 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) 3.34613683s ago: executing program 2 (id=94): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r6, &(0x7f0000000100)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r5, r5, &(0x7f00000000c0)=0x7, 0x6fecb1) 3.04960081s ago: executing program 4 (id=95): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000280)={0x34, &(0x7f00000001c0)=[{0x17, '\x00', @data=0x2}]}) 2.961896481s ago: executing program 4 (id=96): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="4b1403000000", 0x6) 2.946193953s ago: executing program 4 (id=98): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80012, 0xffffffffffffffff, 0x80000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r3, 0x0, 0x2d, r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0x3e}, 0x28) socket$nl_crypto(0x10, 0x3, 0x15) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r5, &(0x7f00000004c0)='./cgroup\x00', 0x88802) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 2.009692455s ago: executing program 4 (id=104): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019680)=@bpf_lsm={0x1d, 0xb, &(0x7f0000019600)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b708000f060000007b8af8ff00000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000000000000000000000000000000000002ca8527b4a3dd28946e071b2c01485bfff07"], &(0x7f0000019840)='GPL\x00', 0x100, 0xb7, &(0x7f0000019a00)=""/183, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000019c40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000019c80)={0x3, 0x5, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f000001a040)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f000001a080)=[{0x400002, 0x5, 0x1, 0x4}, {0x0, 0x5, 0x6, 0x5}, {0x0, 0x1, 0x5, 0x2}], 0x10, 0xfff}, 0x94) fsopen(0x0, 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000280)=ANY=[]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setpgid(0x0, 0x0) setpgid(0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000195c0)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="33511ad5f844d505000000002100000118120000", @ANYRES16=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000440)=""/152, &(0x7f0000000500)=0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000019580)='FROZEN\x00', 0x7) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r7, r7, 0x0, 0x9) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="050026bd7000000000", @ANYRES32=r3, @ANYBLOB="30000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001007206030303030303080026006c09000008000c006400000008000d0000000000"], 0x64}}, 0x20000014) 2.007942969s ago: executing program 0 (id=106): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000000) 1.977100529s ago: executing program 3 (id=107): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000100)=0x4) 1.964414921s ago: executing program 0 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.890028797s ago: executing program 3 (id=109): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/172, 0xac}], 0x1, 0x205, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.815136409s ago: executing program 0 (id=110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="c0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000000)="81", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0xc) 1.797131412s ago: executing program 0 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000a40000000020c0001800800094000000004080008400000005c0500050002000000050001"], 0x70}}, 0x8000) 1.737972963s ago: executing program 0 (id=112): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000340), 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) r5 = io_uring_setup(0x7a98, &(0x7f0000000080)={0x0, 0x6d47, 0x0, 0x0, 0x35e}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0)=[0x2, 0xffff], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x7, 0x2) getsockname$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) socket$inet_udp(0x2, 0x2, 0x0) 1.728743002s ago: executing program 3 (id=113): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.375218403s ago: executing program 3 (id=114): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x7f, 0x2, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x2, {0x2, 0x1, 0xfcd, 0x9, 0x6, 0x4}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f00000000c0)={'syz_tun\x00', @random="049578312ce6"}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 965.928858ms ago: executing program 4 (id=115): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000002c0)={0x1, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000150001002abd7000fedbdf257f0000010000000000000000000000007f0000010000000000000000000000004e2200004e220101020080a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e00000000000a001000"], 0x5c}}, 0x80c4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 489.897614ms ago: executing program 3 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 436.604217ms ago: executing program 0 (id=117): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x6, 0xffffff34) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000300)={0x1, "7696ef7aaf1f677422c246bc2deda4582479791f8e12a515ed016fdfafbb656424baad56b5b1ab895dea52c2d4a1dbe5fdcecbe2d2c700203d84738dd428e3a34c4eae30efdde65f901d975f30526902bd54e9a4206bd0611ce7c3ceb79c93e38689f17c903bf61936e3cf0d568087bb540d71f878767228cb6e9b2ad0f2ace7dd"}, 0x89, 0x800) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000020000001800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r7, 0xb) 435.98006ms ago: executing program 2 (id=118): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="00000000000000000000ffff0000", @ANYRES32=0x0, @ANYRES32], 0x50) 361.89842ms ago: executing program 2 (id=119): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002", 0x29}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r1, 0x800) accept(r1, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 340.90133ms ago: executing program 3 (id=120): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x63, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 4 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=r2, @ANYBLOB="010028bd700001dcdf", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x44001}, 0x40810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getgid() sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0xc, &(0x7f0000000040)={0x80000000, 0xffffffffffff321f}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r10) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) r12 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r12, 0xc02c564a, &(0x7f0000000040)={0x20, 0x31364d59, 0x1, @discrete={0xff, 0x1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 28.420090][ T4657] cgroup: Unknown subsys name 'net' [ 28.549817][ T4657] cgroup: Unknown subsys name 'cpuset' [ 28.552046][ T4657] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.712182][ T4657] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.338339][ T4673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.338799][ T4673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.339134][ T4673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.339291][ T4673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.339615][ T4673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.339846][ T4673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.340445][ T4673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.347213][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.351839][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.361607][ T4673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.362003][ T4673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.362260][ T4673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.362404][ T4673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.362731][ T4673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.362949][ T4673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.383477][ T4673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.385798][ T4673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.389281][ T4673] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.392746][ T4673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.400380][ T4673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.422115][ T4673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.424025][ T4673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.425876][ T4673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.428073][ T4673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.429851][ T4673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.686518][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.686812][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.686890][ T4669] bridge_slave_0: entered allmulticast mode [ 30.687356][ T4669] bridge_slave_0: entered promiscuous mode [ 30.699545][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.699629][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.699732][ T4669] bridge_slave_1: entered allmulticast mode [ 30.700160][ T4669] bridge_slave_1: entered promiscuous mode [ 30.709069][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.725472][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.758954][ T4669] team0: Port device team_slave_0 added [ 30.767176][ T4669] team0: Port device team_slave_1 added [ 30.787276][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.788641][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.793094][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.804250][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.805701][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.810853][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.828699][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.829036][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.829110][ T4670] bridge_slave_0: entered allmulticast mode [ 30.829573][ T4670] bridge_slave_0: entered promiscuous mode [ 30.830348][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.830369][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.830456][ T4670] bridge_slave_1: entered allmulticast mode [ 30.830925][ T4670] bridge_slave_1: entered promiscuous mode [ 30.862299][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.862376][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.862442][ T4680] bridge_slave_0: entered allmulticast mode [ 30.862906][ T4680] bridge_slave_0: entered promiscuous mode [ 30.866428][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.866450][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.866504][ T4680] bridge_slave_1: entered allmulticast mode [ 30.866945][ T4680] bridge_slave_1: entered promiscuous mode [ 30.875948][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.886085][ T4669] hsr_slave_0: entered promiscuous mode [ 30.886469][ T4669] hsr_slave_1: entered promiscuous mode [ 30.887942][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.909878][ T4680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.912726][ T4670] team0: Port device team_slave_0 added [ 30.913555][ T4670] team0: Port device team_slave_1 added [ 30.920404][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.920482][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.920543][ T4678] bridge_slave_0: entered allmulticast mode [ 30.920988][ T4678] bridge_slave_0: entered promiscuous mode [ 30.921803][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.921835][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.921928][ T4678] bridge_slave_1: entered allmulticast mode [ 30.922392][ T4678] bridge_slave_1: entered promiscuous mode [ 30.932337][ T4680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.939975][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.941346][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.946332][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.962974][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.962998][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.963017][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.973040][ T4670] hsr_slave_0: entered promiscuous mode [ 30.973321][ T4670] hsr_slave_1: entered promiscuous mode [ 30.973522][ T4670] debugfs: 'hsr0' already exists in 'hsr' [ 30.973559][ T4670] Cannot create hsr debugfs directory [ 30.979660][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.981074][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.982610][ T4677] bridge_slave_0: entered allmulticast mode [ 30.984189][ T4677] bridge_slave_0: entered promiscuous mode [ 30.987400][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.988617][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.988732][ T4677] bridge_slave_1: entered allmulticast mode [ 30.989169][ T4677] bridge_slave_1: entered promiscuous mode [ 30.990810][ T4678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.994529][ T4678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.011147][ T4680] team0: Port device team_slave_0 added [ 31.011983][ T4680] team0: Port device team_slave_1 added [ 31.020068][ T4678] team0: Port device team_slave_0 added [ 31.020855][ T4678] team0: Port device team_slave_1 added [ 31.035048][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.035069][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.035087][ T4680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.035668][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.035676][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.035692][ T4680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.041506][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.041515][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.041530][ T4678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.043347][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.044317][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.072726][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.074089][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.078608][ T4678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.079481][ T4677] team0: Port device team_slave_0 added [ 31.080659][ T4677] team0: Port device team_slave_1 added [ 31.091937][ T4680] hsr_slave_0: entered promiscuous mode [ 31.092335][ T4680] hsr_slave_1: entered promiscuous mode [ 31.092558][ T4680] debugfs: 'hsr0' already exists in 'hsr' [ 31.092569][ T4680] Cannot create hsr debugfs directory [ 31.099495][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.099515][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.099540][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.100162][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.100170][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.100181][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.130447][ T4677] hsr_slave_0: entered promiscuous mode [ 31.130769][ T4677] hsr_slave_1: entered promiscuous mode [ 31.130971][ T4677] debugfs: 'hsr0' already exists in 'hsr' [ 31.130981][ T4677] Cannot create hsr debugfs directory [ 31.141752][ T4678] hsr_slave_0: entered promiscuous mode [ 31.143336][ T4678] hsr_slave_1: entered promiscuous mode [ 31.144941][ T4678] debugfs: 'hsr0' already exists in 'hsr' [ 31.146237][ T4678] Cannot create hsr debugfs directory [ 31.159636][ T4669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.164723][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.176336][ T4669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.180356][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.193865][ T4669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.196229][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.212623][ T4669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.215087][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.254201][ T4670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.257088][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.263383][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.263446][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.263599][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.263627][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.265351][ T4670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.267333][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.273980][ T4670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.276273][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.278088][ T4670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.280494][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.300935][ T4677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.303437][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.305346][ T4677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.307461][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.309452][ T4677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.311768][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.314215][ T4677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.316380][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.324174][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.324307][ T4670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.324381][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.324409][ T4670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.352218][ T4680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.355446][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.359214][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.362405][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.364093][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.367793][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.369530][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.381951][ T4680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.383035][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.383325][ T4680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.384439][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.391802][ T4669] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.392675][ T4680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.393987][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.414422][ T3856] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.414476][ T3856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.415054][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.415077][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.422423][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.425615][ T4678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.427941][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.434626][ T4678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.436931][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.442333][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.451931][ T3856] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.451976][ T3856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.455057][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.455099][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.456716][ T4678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.461266][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.462317][ T4678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.464478][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.535242][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.541578][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.555996][ T4680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.561195][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.568220][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.568291][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.568901][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.568939][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.577453][ T4678] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.582113][ T4680] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.591310][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.591356][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.600127][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.600166][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.603889][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.603938][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.614794][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.614840][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.619671][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.647361][ T4678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.647439][ T4678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.656713][ T4677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.656743][ T4677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.765756][ T4669] veth0_vlan: entered promiscuous mode [ 31.772371][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.785573][ T4670] veth0_vlan: entered promiscuous mode [ 31.791457][ T4669] veth1_vlan: entered promiscuous mode [ 31.794451][ T4670] veth1_vlan: entered promiscuous mode [ 31.830954][ T4670] veth0_macvtap: entered promiscuous mode [ 31.833925][ T4670] veth1_macvtap: entered promiscuous mode [ 31.846263][ T4669] veth0_macvtap: entered promiscuous mode [ 31.850705][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.853362][ T4669] veth1_macvtap: entered promiscuous mode [ 31.855265][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.864188][ T4678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.883741][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.884793][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.891685][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892049][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892069][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892087][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892103][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892119][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892134][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892149][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.912305][ T4678] veth0_vlan: entered promiscuous mode [ 31.942868][ T4680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.952562][ T4678] veth1_vlan: entered promiscuous mode [ 31.967427][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.982312][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.982343][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.992649][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.992675][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.995151][ T4678] veth0_macvtap: entered promiscuous mode [ 31.995760][ T4680] veth0_vlan: entered promiscuous mode [ 31.999272][ T4678] veth1_macvtap: entered promiscuous mode [ 32.009420][ T4680] veth1_vlan: entered promiscuous mode [ 32.014111][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.014139][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.034229][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.034259][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.037768][ T4680] veth0_macvtap: entered promiscuous mode [ 32.045332][ T4677] veth0_vlan: entered promiscuous mode [ 32.048152][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.050741][ T4680] veth1_macvtap: entered promiscuous mode [ 32.059384][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.062378][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.062534][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.062634][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.062785][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.065656][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.066690][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.068365][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068464][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068517][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068570][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.071477][ T4677] veth1_vlan: entered promiscuous mode [ 32.085992][ T4669] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.134659][ T4677] veth0_macvtap: entered promiscuous mode [ 32.144803][ T4677] veth1_macvtap: entered promiscuous mode [ 32.153689][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.160785][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.197264][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.204701][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.206899][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.220911][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.220927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.221933][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223081][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223250][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.243249][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.245897][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.260643][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.260670][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.421972][ T4672] Bluetooth: hci1: command tx timeout [ 32.422214][ T4672] Bluetooth: hci2: command tx timeout [ 32.422413][ T4672] Bluetooth: hci0: command tx timeout [ 32.422600][ T4672] Bluetooth: hci4: command tx timeout [ 32.516328][ T4673] Bluetooth: hci3: command tx timeout [ 33.191904][ T4855] infiniband syz2: set down [ 33.191941][ T4855] infiniband syz2: added ipvlan0 [ 33.192998][ T4855] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 33.193893][ T4855] infiniband syz2: Couldn't open port 1 [ 33.221431][ T4855] RDS/IB: syz2: added [ 33.221533][ T4855] smc: adding ib device syz2 with port count 1 [ 33.221572][ T4855] smc: ib device syz2 port 1 has no pnetid [ 33.264192][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.264226][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.265738][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.265760][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.394159][ T4862] loop2: detected capacity change from 0 to 4096 [ 33.406688][ T4862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.160117][ T4680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.202774][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.203014][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.221917][ T4864] Zero length message leads to an empty skb [ 34.297522][ T4886] syzkaller0: entered promiscuous mode [ 34.297561][ T4886] syzkaller0: entered allmulticast mode [ 34.314608][ T4888] capability: warning: `syz.0.14' uses 32-bit capabilities (legacy support in use) [ 34.391596][ T4892] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16'. [ 34.416742][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.416973][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.426468][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.435597][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.488424][ T4672] Bluetooth: hci4: command tx timeout [ 34.488667][ T4673] Bluetooth: hci0: command tx timeout [ 34.488703][ T4673] Bluetooth: hci2: command tx timeout [ 34.488731][ T4673] Bluetooth: hci1: command tx timeout [ 34.505839][ T4894] binder: 4893:4894 ioctl 4018620d 20001000 returned -22 [ 34.506049][ T4894] binder: tried to use weak ref as strong ref [ 34.506058][ T4894] binder: 4893:4894 Acquire 1 refcount change on invalid ref 0 ret -22 [ 34.506078][ T4894] binder: 4893:4894 got transaction to invalid handle, 1 [ 34.506100][ T4894] binder: 4893:4894 cannot find target node [ 34.506113][ T4894] binder: 4893:4894 transaction async to 0:0 failed 3/29201/-22, code 0 size 88-24 line 3236 [ 34.508380][ T4776] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.578399][ T50] Bluetooth: hci3: command tx timeout [ 34.578989][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.579148][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.964200][ T4958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.964405][ T4958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.058518][ T4781] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 36.104591][ T4963] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 36.211227][ T4781] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 36.211263][ T4781] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 36.211286][ T4781] usb 1-1: Product: syz [ 36.211293][ T4781] usb 1-1: Manufacturer: syz [ 36.211299][ T4781] usb 1-1: SerialNumber: syz [ 36.218520][ T4781] usb 1-1: config 0 descriptor?? [ 36.422614][ T4781] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 36.639208][ T50] Bluetooth: hci4: command tx timeout [ 36.639314][ T50] Bluetooth: hci1: command tx timeout [ 36.639390][ T50] Bluetooth: hci2: command tx timeout [ 36.639453][ T50] Bluetooth: hci0: command tx timeout [ 36.653277][ T4979] block device autoloading is deprecated and will be removed. [ 36.656565][ T50] Bluetooth: hci3: command tx timeout [ 36.822114][ T4781] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 36.822149][ T4781] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 36.851389][ T4986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.851582][ T4986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.870045][ T4781] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 36.876301][ T4781] usb 1-1: USB disconnect, device number 2 [ 37.827527][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 38.378441][ T4980] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 38.536547][ T5029] block device autoloading is deprecated and will be removed. [ 38.607052][ T4980] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 38.607401][ T4980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.608534][ T4980] usb 1-1: Product: syz [ 38.608547][ T4980] usb 1-1: Manufacturer: syz [ 38.608556][ T4980] usb 1-1: SerialNumber: syz [ 38.648578][ T4672] Bluetooth: hci0: command tx timeout [ 38.648709][ T4672] Bluetooth: hci2: command tx timeout [ 38.648724][ T4672] Bluetooth: hci1: command tx timeout [ 38.648738][ T4672] Bluetooth: hci4: command tx timeout [ 38.728739][ T50] Bluetooth: hci3: command tx timeout [ 38.906909][ T5032] netlink: 'syz.4.70': attribute type 3 has an invalid length. [ 38.907120][ T5032] netlink: 666 bytes leftover after parsing attributes in process `syz.4.70'. [ 39.356563][ T4670] cgroup: fork rejected by pids controller in /syz1 [ 39.368385][ T30] audit: type=1107 audit(39.340:2): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 39.559222][ T5073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'. [ 39.932122][ T3856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.994879][ T4672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.997500][ T4672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.999886][ T4672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.000979][ T4672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.001212][ T4672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.015757][ T3856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.031635][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 40.091637][ T3856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.164842][ T3856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.637130][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.637341][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.021112][ T4980] usb 1-1: USB disconnect, device number 3 [ 41.061405][ T3856] bridge_slave_1: left allmulticast mode [ 41.063277][ T3856] bridge_slave_1: left promiscuous mode [ 41.065109][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.069689][ T3856] bridge_slave_0: left allmulticast mode [ 41.072078][ T3856] bridge_slave_0: left promiscuous mode [ 41.073534][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.239411][ T3856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.310299][ T3856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.342267][ T3856] bond0 (unregistering): Released all slaves [ 41.347168][ T4358] 8021q: adding VLAN 0 to HW filter on device eth0 [ 41.412523][ T5139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.103'. [ 41.593193][ T5151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.594544][ T5151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.756034][ T4358] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.894970][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.895045][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.895115][ T5084] bridge_slave_0: entered allmulticast mode [ 41.895593][ T5084] bridge_slave_0: entered promiscuous mode [ 41.896440][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.896490][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.896541][ T5084] bridge_slave_1: entered allmulticast mode [ 41.897010][ T5084] bridge_slave_1: entered promiscuous mode [ 41.904992][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.906056][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.915488][ T5084] team0: Port device team_slave_0 added [ 41.916344][ T5084] team0: Port device team_slave_1 added [ 41.980606][ T5186] IPVS: length: 24 != 51539675160 [ 42.008643][ T4672] Bluetooth: hci1: command tx timeout [ 42.160123][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.163271][ T5185] block nbd3: shutting down sockets [ 42.165423][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.170947][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.213856][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.213886][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.213915][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.296909][ T3856] hsr_slave_0: left promiscuous mode [ 42.298103][ T3856] hsr_slave_1: left promiscuous mode [ 42.298569][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.298585][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.300163][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.300175][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.304424][ T3856] veth1_macvtap: left promiscuous mode [ 42.304455][ T3856] veth0_macvtap: left promiscuous mode [ 42.304564][ T3856] veth1_vlan: left promiscuous mode [ 42.304597][ T3856] veth0_vlan: left promiscuous mode [ 42.429763][ T5199] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 42.613865][ T3794] smc: removing ib device syz2 [ 42.979524][ T3856] team0 (unregistering): Port device team_slave_1 removed [ 42.983802][ T3856] team0 (unregistering): Port device team_slave_0 removed [ 43.044756][ T5084] hsr_slave_0: entered promiscuous mode [ 43.045187][ T5084] hsr_slave_1: entered promiscuous mode [ 43.045395][ T5084] debugfs: 'hsr0' already exists in 'hsr' [ 43.045406][ T5084] Cannot create hsr debugfs directory [ 43.085519][ T4358] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.256900][ T5223] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 43.272210][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.278685][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.599089][ C0] [ 43.599583][ C0] ================================ [ 43.600579][ C0] WARNING: inconsistent lock state [ 43.601517][ C0] syzkaller #0 Not tainted [ 43.602335][ C0] -------------------------------- [ 43.603266][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 43.604530][ C0] syz.2.119/5219 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 43.605750][ C0] ffff0000dc4742e8 (slock-AF_PHONET/1){+.?.}-{3:3}, at: __sk_receive_skb+0x1ac/0x8d4 [ 43.607650][ C0] {SOFTIRQ-ON-W} state was registered at: [ 43.608686][ C0] lock_acquire+0x140/0x368 [ 43.609657][ C0] _raw_spin_lock_nested+0x50/0x6c [ 43.610656][ C0] __sk_receive_skb+0x1ac/0x8d4 [ 43.611635][ C0] pep_do_rcv+0x208/0x684 [ 43.612539][ C0] __release_sock+0x178/0x2c0 [ 43.613449][ C0] release_sock+0x174/0x228 [ 43.614358][ C0] pep_sock_accept+0x804/0xc08 [ 43.615291][ C0] pn_socket_accept+0xc8/0x26c [ 43.616213][ C0] do_accept+0x304/0x42c [ 43.617064][ C0] __sys_accept4+0x11c/0x1f8 [ 43.617960][ C0] __arm64_sys_accept+0x80/0x98 [ 43.618885][ C0] invoke_syscall+0x98/0x244 [ 43.619722][ C0] el0_svc_common+0xe8/0x23c [ 43.620612][ C0] do_el0_svc+0x48/0x58 [ 43.621394][ C0] el0_svc+0x64/0x260 [ 43.622139][ C0] el0t_64_sync_handler+0x48/0x148 [ 43.623071][ C0] el0t_64_sync+0x198/0x19c [ 43.623974][ C0] irq event stamp: 3312 [ 43.624752][ C0] hardirqs last enabled at (3312): [] _raw_spin_unlock_irq+0x30/0x80 [ 43.626676][ C0] hardirqs last disabled at (3311): [] _raw_spin_lock_irq+0x28/0x70 [ 43.628545][ C0] softirqs last enabled at (3306): [] netif_rx+0xac/0xd4 [ 43.630234][ C0] softirqs last disabled at (3307): [] __do_softirq+0x14/0x20 [ 43.631963][ C0] [ 43.631963][ C0] other info that might help us debug this: [ 43.633496][ C0] Possible unsafe locking scenario: [ 43.633496][ C0] [ 43.634860][ C0] CPU0 [ 43.635470][ C0] ---- [ 43.636088][ C0] lock(slock-AF_PHONET/1); [ 43.636956][ C0] [ 43.637564][ C0] lock(slock-AF_PHONET/1); [ 43.638452][ C0] [ 43.638452][ C0] *** DEADLOCK *** [ 43.638452][ C0] [ 43.639943][ C0] 5 locks held by syz.2.119/5219: [ 43.640933][ C0] #0: ffff0000f2213240 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 43.642983][ C0] #1: ffff0000d1cc9c60 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x90/0x4a8 [ 43.644789][ C0] #2: ffff800088ad72a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x574/0x16f8 [ 43.646485][ C0] #3: ffff0000dc474968 (slock-AF_PHONET){+.-.}-{3:3}, at: __sk_receive_skb+0x1e0/0x8d4 [ 43.648350][ C0] #4: ffff0000dc4749e0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x64c/0xa94 [ 43.650219][ C0] [ 43.650219][ C0] stack backtrace: [ 43.651371][ C0] CPU: 0 UID: 0 PID: 5219 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT [ 43.653054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.654935][ C0] Call trace: [ 43.655585][ C0] show_stack+0x2c/0x3c (C) [ 43.656497][ C0] __dump_stack+0x30/0x40 [ 43.657291][ C0] dump_stack_lvl+0xd8/0x12c [ 43.658164][ C0] dump_stack+0x1c/0x28 [ 43.658891][ C0] print_usage_bug+0x310/0x384 [ 43.659756][ C0] mark_lock_irq+0x4a0/0x4a8 [ 43.660593][ C0] mark_lock+0x144/0x1a4 [ 43.661396][ C0] __lock_acquire+0x6bc/0x2f44 [ 43.662291][ C0] lock_acquire+0x140/0x368 [ 43.663178][ C0] _raw_spin_lock_nested+0x50/0x6c [ 43.664152][ C0] __sk_receive_skb+0x1ac/0x8d4 [ 43.665072][ C0] pep_do_rcv+0x208/0x684 [ 43.665935][ C0] __sk_receive_skb+0x458/0x8d4 [ 43.666854][ C0] phonet_rcv+0x64c/0xa94 [ 43.667637][ C0] __netif_receive_skb_one_core+0xc4/0x10c [ 43.668711][ C0] __netif_receive_skb+0x34/0x128 [ 43.669560][ C0] process_backlog+0x610/0x16f8 [ 43.670411][ C0] __napi_poll+0xb0/0x324 [ 43.671282][ C0] net_rx_action+0x568/0xbcc [ 43.672178][ C0] handle_softirqs+0x2e4/0xd34 [ 43.673041][ C0] __do_softirq+0x14/0x20 [ 43.673846][ C0] ____do_softirq+0x14/0x20 [ 43.674681][ C0] call_on_irq_stack+0x30/0x48 [ 43.675613][ C0] do_softirq_own_stack+0x20/0x2c [ 43.676574][ C0] do_softirq+0x90/0xf8 [ 43.677361][ C0] __local_bh_enable_ip+0x240/0x35c [ 43.678369][ C0] netif_rx+0xb4/0xd4 [ 43.679184][ C0] pn_send+0x4e8/0x780 [ 43.679984][ C0] pn_skb_send+0x1dc/0x508 [ 43.680839][ C0] pipe_handler_request+0x128/0x234 [ 43.681819][ C0] pep_sock_close+0x124/0x4a8 [ 43.682753][ C0] pn_socket_release+0x9c/0xbc [ 43.683699][ C0] __sock_release+0xa0/0x1d4 [ 43.684483][ C0] sock_close+0x24/0x38 [ 43.685275][ C0] __fput+0x340/0x744 [ 43.686048][ C0] ____fput+0x20/0x30 [ 43.686799][ C0] task_work_run+0x1c4/0x254 [ 43.687727][ C0] exit_to_user_mode_loop+0x10c/0x17c [ 43.688786][ C0] el0_svc+0x18c/0x260 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 43.689630][ C0] el0t_64_sync_handler+0x48/0x148 [ 43.690633][ C0] el0t_64_sync+0x198/0x19c [ 43.696050][ T5219] gprs0: detached [ 44.026010][ T4358] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.120214][ T3794] bridge_slave_1: left allmulticast mode [ 44.120247][ T3794] bridge_slave_1: left promiscuous mode [ 44.120328][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.122626][ T3794] bridge_slave_0: left allmulticast mode [ 44.122636][ T3794] bridge_slave_0: left promiscuous mode [ 44.122689][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.220110][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.260674][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.309045][ T3794] bond0 (unregistering): Released all slaves [ 44.342848][ T3794] hsr_slave_0: left promiscuous mode [ 44.343992][ T3794] hsr_slave_1: left promiscuous mode [ 44.344174][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.346721][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.376282][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 44.378723][ T3794] team0 (unregistering): Port device team_slave_0 removed [ 44.710429][ T3794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.781034][ T3794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.849886][ T3794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.910177][ T3794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.022170][ T3794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.103971][ T4358] 8021q: adding VLAN 0 to HW filter on device eth4 [ 45.110367][ T3794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.151765][ T3794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.195806][ T4358] 8021q: adding VLAN 0 to HW filter on device eth5 [ 45.213683][ T3794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.304930][ T4358] 8021q: adding VLAN 0 to HW filter on device eth7 [ 45.334861][ T3794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.382715][ T3794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.414154][ T4358] 8021q: adding VLAN 0 to HW filter on device eth6 [ 45.459997][ T3794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.491671][ T3794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.508489][ T4358] 8021q: adding VLAN 0 to HW filter on device eth8 [ 45.591893][ T3794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.614933][ T4358] 8021q: adding VLAN 0 to HW filter on device eth9 [ 45.627622][ T3794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.714642][ T3794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.719042][ T4358] 8021q: adding VLAN 0 to HW filter on device eth10 [ 45.782898][ T3794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.808171][ T4358] 8021q: adding VLAN 0 to HW filter on device eth11 [ 45.900005][ T3794] bridge_slave_1: left allmulticast mode [ 45.900038][ T3794] bridge_slave_1: left promiscuous mode [ 45.900128][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.903010][ T3794] bridge_slave_0: left allmulticast mode [ 45.903024][ T3794] bridge_slave_0: left promiscuous mode [ 45.903087][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.058404][ T3794] bridge_slave_1: left allmulticast mode [ 46.058434][ T3794] bridge_slave_1: left promiscuous mode [ 46.058528][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.060978][ T3794] bridge_slave_0: left allmulticast mode [ 46.060988][ T3794] bridge_slave_0: left promiscuous mode [ 46.061036][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.248350][ T3794] bridge_slave_1: left allmulticast mode [ 46.248382][ T3794] bridge_slave_1: left promiscuous mode [ 46.248463][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.250940][ T3794] bridge_slave_0: left allmulticast mode [ 46.250951][ T3794] bridge_slave_0: left promiscuous mode [ 46.251010][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.478562][ T3794] bridge_slave_1: left allmulticast mode [ 46.478595][ T3794] bridge_slave_1: left promiscuous mode [ 46.478668][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.481077][ T3794] bridge_slave_0: left allmulticast mode [ 46.481087][ T3794] bridge_slave_0: left promiscuous mode [ 46.481128][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.802936][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.839185][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.859020][ T3794] bond0 (unregistering): Released all slaves [ 46.906433][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.919209][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.949185][ T3794] bond0 (unregistering): Released all slaves [ 47.033477][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.079269][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.089024][ T3794] bond0 (unregistering): Released all slaves [ 47.171424][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.199128][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.219005][ T3794] bond0 (unregistering): Released all slaves [ 47.220695][ T4358] 8021q: adding VLAN 0 to HW filter on device eth12 [ 47.322688][ T4358] 8021q: adding VLAN 0 to HW filter on device eth13 [ 47.460119][ T4358] 8021q: adding VLAN 0 to HW filter on device eth14 [ 47.546191][ T4358] 8021q: adding VLAN 0 to HW filter on device eth15 [ 47.645518][ T4358] 8021q: adding VLAN 0 to HW filter on device eth16 [ 47.748953][ T4358] 8021q: adding VLAN 0 to HW filter on device eth17 [ 47.893321][ T4358] 8021q: adding VLAN 0 to HW filter on device eth18 [ 47.980965][ T4358] 8021q: adding VLAN 0 to HW filter on device eth19 [ 48.203193][ T3794] hsr_slave_0: left promiscuous mode [ 48.204431][ T3794] hsr_slave_1: left promiscuous mode [ 48.204616][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.204626][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.209510][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.209528][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.213224][ T3794] hsr_slave_0: left promiscuous mode [ 48.214340][ T3794] hsr_slave_1: left promiscuous mode [ 48.214531][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.214541][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.215655][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.215663][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.222830][ T3794] hsr_slave_0: left promiscuous mode [ 48.223933][ T3794] hsr_slave_1: left promiscuous mode [ 48.224307][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.224316][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.225188][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.225195][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.231090][ T3794] hsr_slave_0: left promiscuous mode [ 48.232258][ T3794] hsr_slave_1: left promiscuous mode [ 48.232592][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.232601][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.236365][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.236537][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.245744][ T3794] veth1_macvtap: left promiscuous mode [ 48.245772][ T3794] veth0_macvtap: left promiscuous mode [ 48.245806][ T3794] veth1_vlan: left promiscuous mode [ 48.245831][ T3794] veth0_vlan: left promiscuous mode [ 48.250099][ T3794] veth1_macvtap: left promiscuous mode [ 48.250121][ T3794] veth0_macvtap: left promiscuous mode [ 48.250148][ T3794] veth1_vlan: left promiscuous mode [ 48.250178][ T3794] veth0_vlan: left promiscuous mode [ 48.254279][ T3794] veth1_macvtap: left promiscuous mode [ 48.254397][ T3794] veth0_macvtap: left promiscuous mode [ 48.254432][ T3794] veth1_vlan: left promiscuous mode [ 48.254453][ T3794] veth0_vlan: left promiscuous mode [ 48.258503][ T3794] veth1_macvtap: left promiscuous mode [ 48.258530][ T3794] veth0_macvtap: left promiscuous mode [ 48.258579][ T3794] veth1_vlan: left promiscuous mode [ 48.258603][ T3794] veth0_vlan: left promiscuous mode [ 48.419092][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 48.421454][ T3794] team0 (unregistering): Port device team_slave_0 removed [ 48.494313][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 48.498558][ T3794] team0 (unregistering): Port device team_slave_0 removed [ 48.552897][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 48.555566][ T3794] team0 (unregistering): Port device team_slave_0 removed [ 48.647849][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 48.650293][ T3794] team0 (unregistering): Port device team_slave_0 removed